1.Is a firewall sufficient in blocking outside intrusion? Why or Why Not?

2.Define NIDS and HIDS. What are their pros and cons of NIDS and HIDS?

3.What are the differences between misuse detection model and anomaly detection model? What is false positive?

4.What is DMZ? How does the DMZ enhance security?

5.Describe how digital certificate are used during the handshake process of SSL.

6.How can you determine whether an email is forged or not? List the tools you may need to use.

7.What is spam? What kind of damage can a spam cause? How to control spam email?

8.Describe how cross-site scripting (XSS) works. What kind of damage it may cause to the victim computer?

9.How to authenticate a web server?

10.Describe how SQL injection works. What are the major preventive measures against it?